57 matches found
Amazon Linux 2 : pcs (ALAS-2024-2492)
The version of pcs installed on the remote host is prior to 0.9.169-3. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2024-2492 advisory. A Denial of Service DoS vulnerability was found in rubygem-rack in how it parses Content-Type. Carefully crafted content typ...
Medium: pcs
Issue Overview: A Denial of Service DoS vulnerability was found in rubygem-rack in how it parses Content-Type. Carefully crafted content type headers can cause Rack's media type parser to take much longer than expected, leading to a possible denial of service vulnerability. CVE-2024-25126 A Denia...
openSUSE Security Advisory (SUSE-SU-2024:0765-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE SLES15: ruby2.5-rubygem-rack / ruby2.5-rubygem-rack-doc / etc (SUSE-SU-2024:0765-1)
The remote SUSE Linux SLES15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:0765-1 advisory. - CVE-2024-25126: Fixed a denial-of-service vulnerability in Rack Content-Type parsing bsc1220239. - CVE-2024-26141: Fixed a...
CVE-2024-25126 vulnerabilities
Vulnerabilities for packages: kube-fluentd-operator, ruby3.2-rack...
CVE-2024-25126 vulnerabilities
Vulnerabilities for packages: ruby3.2-rack, kube-fluentd-operator...
CVE-2024-25126 Rack ReDos in content type parsing (2nd degree polynomial)
Rack is a modular Ruby web server interface. Carefully crafted content type headers can cause Rack’s media type parser to take much longer than expected, leading to a possible denial of service vulnerability ReDos 2nd degree polynomial. This vulnerability is patched in 3.0.9.1 and 2.2.8.1...
CVE-2024-25126
Rack (Ruby) is affected by CVE-2024-25126, a Denial of Service caused by pathological parsing of Content-Type headers in Rack’s media type parser. The issue is disclosed across multiple advisories and is addressed by patches in Rack versions 3.0.9.1 and 2.2.8.1. In connected advisories, related D...
CVE-2024-25126 Rack ReDos in content type parsing (2nd degree polynomial)
Rack is a modular Ruby web server interface. Carefully crafted content type headers can cause Rack’s media type parser to take much longer than expected, leading to a possible denial of service vulnerability ReDos 2nd degree polynomial. This vulnerability is patched in 3.0.9.1 and 2.2.8.1...
CVE-2024-25126
creationtimestamp| type| source ---|---|--- 2024-02-23 04:11:29+00:00| seen| https://t.me/ctinow/191428 2024-02-28 22:28:37+00:00| published-proof-of-concept| https://github.com/rack/rack/security/advisories/GHSA-22f2-v57c-j9cx 2024-02-29 01:27:00+00:00| seen| https://t.me/ctinow/196067 2024-02-2...
Denial of Service Vulnerability in Rack Content-Type Parsing
There is a possible denial of service vulnerability in the content type parsing component of Rack. This vulnerability has been assigned the CVE identifier CVE-2024-25126. Versions Affected: = 0.4 Not affected: 0.4 Fixed Versions: 3.0.9.1, 2.2.8.1 Impact Carefully crafted content type headers can...
CVE-2023-25126
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2023. Notes: none...
CVE-2021-25126
creationtimestamp| type| source ---|---|--- 2021-01-29 23:25:21+00:00| seen| https://t.me/cibsecurity/22864...
CVE-2021-25126
The Baseboard Management ControllerBMC in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local buffer overlfow in spxrestservice downloadkvmjnlpfunc...
CVE-2021-25126
The CVE-2021-25126 issue affects HPE Cloudline BMC firmware across CL5800 Gen9/Gen10, CL5200 Gen9, CL4100 Gen10, and CL3100 Gen10. Root cause is a local buffer overflow in spx_restservice’s downloadkvmjnlp_func function. The NVD notes high impact with complete confidentiality, integrity, and avai...